Privacy Policy

What we collect

Your privacy is important to us. It is AuthenticateMe's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://authenticateme.xyz/, our Discord application, and other sites and services we own and operate. This policy was last updated on July 11, 2026.

Log data

When you visit our website, our servers may automatically log the standard data provided by your web browser. This may include your device's Internet Protocol (IP) address, your browser type and version, your operating system, the pages you visit, the time and date of your visit, the time spent on each page, and technical details that occur in conjunction with any errors you may encounter.

Please be aware that while some of this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Verification data

AuthenticateMe provides verification services for Discord servers. The data involved depends on the verification method and applicable service features. Web verification processes browser-based security signals that Discord-only button and instant verification do not. See our Data Collection page for a detailed breakdown.

We may also set an identifier cookie, used solely to detect alternative accounts. This data is used exclusively to perform the verification checks configured by the server you are joining and to protect servers against alternative accounts, ban evasion, automation, and abuse.

Personal information

Depending on how you use our services, the categories of personal information we process may include:

• Discord account and OAuth data, including user ID, username, avatar, account-creation information, multi-factor authentication status, email address, and refresh token where applicable;
• verification sessions, outcomes, configured bypasses, linked-account references, timestamps, and moderation actions;
• network, cookie, browser, device, fingerprint, and fraud-detection information;
• dashboard authentication, manageable-server, and server-configuration information;
• premium membership, linked Discord account, server assignment, tier, and expiration information;
• website usage, request, error, analytics, advertising, and similar online-identifier data; and
• support, privacy-request, and other correspondence you send to us.

Online identifiers and technical information such as IP addresses, cookie identifiers, fingerprint identifiers, browser details, operating-system details, and device characteristics may be personal information when they identify or can be linked to a person. We treat them as personal information where applicable law requires.

We obtain information directly from you or your browser, from Discord and participating-server interactions, from services you choose to use such as Patreon or top.gg, and from providers that support network and fraud analysis.

How we use it

We collect and use personal information only for the purposes described in this policy, only to the extent reasonably necessary, and only where applicable law permits it. Depending on the interaction and jurisdiction, processing may be necessary to provide a service you request, support our legitimate interests in operating and securing the service where those interests are not overridden by your rights, comply with legal obligations, or rely on consent where required.

We may collect personal information from you when you do any of the following:

• Complete a verification for a Discord server that uses AuthenticateMe
• Sign in to our dashboard using your Discord account
• Subscribe to or use Premium, or participate through services such as top.gg
• Use a mobile device or web browser to access our content
• Contact us through our Support Server or another available support channel

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to provide the verification checks configured by the Discord servers you join
• for security and fraud prevention, and to ensure that our sites, apps, and services are safe, secure, and used in line with our terms of use
• to provide dashboard, premium, community, and support functions
• to understand website usage and display or measure advertising on ad-supported pages where permitted
• to operate, maintain, and improve our services

Automated verification

AuthenticateMe automatically evaluates applicable account, session, network, browser, device, and fraud signals against the checks selected by a participating server. The resulting verification outcome can lead the App to add or remove a role, kick a user, ban a user, or take another action configured by that server. Server staff choose the available checks and actions and remain responsible for their server's membership and moderation decisions.

If you believe an outcome is incorrect, contact the staff of the relevant server. You may also contact us about the personal information used by AuthenticateMe or any right available to you under applicable law in relation to automated processing.

Disclosures and providers

Our privacy commitment

We do not sell, rent, trade, or broker personal information, and we do not enter into data-brokerage arrangements involving verification records.

We do not provide unrelated third parties with a list, database, or lookup that links a Discord account to an email address, raw IP address, identifier cookie, stored fingerprint, or verification record. We do not provide stored verification outcomes or those raw identifiers to advertisers for their own marketing databases.

Personal information is disclosed or processed only for the limited operational, provider, server-administration, and legal purposes described below. This includes service providers that perform specific functions on our behalf and independent services you choose to use. It does not give an unrelated party a general right to use AuthenticateMe's stored verification records as its own product or marketing resource.

Some pages load third-party analytics, advertising, and translation technologies. Those providers may collect standard web data directly from your browser, including your IP address, browser or device details, page URL and query parameters, referrer, interactions, cookies, and other online identifiers. Depending on applicable law, some advertising-related disclosures may be treated as a "sale" or "sharing" even when no money is exchanged for the information. Their processing is governed by their own policies and applicable consent requirements. See our Cookies Policy for more information.

Participating server staff may receive the verification outcome, detection label or reason, relevant linked Discord-account references, and the moderation action configured for the check. They are not given the underlying raw IP address, identifier cookie, stored fingerprint, or email address, and we do not reveal which raw identifier caused two accounts to match.

Disclosure of personal information to third parties

Depending on how you use the service, personal information may be disclosed to or collected by:

• service providers that process data on our behalf for hosting, storage, network analysis, email validation, fraud detection, support, and similar service functions;
• independent services you interact with, such as Discord, Patreon, and top.gg, which process information under their own terms and privacy policies;
• analytics, advertising, and translation providers that collect website information directly as described above; and
• courts, tribunals, regulatory authorities, and law-enforcement officers where permitted or required by law, in connection with legal proceedings, or to establish, exercise, or defend legal rights.

We limit our own disclosures to information relevant to the stated purpose. Third parties acting independently control their own processing under their policies.

International transfers

The personal information we collect is stored or processed where we or our service providers maintain facilities. The countries where we store, process, or transfer personal information may not have the same data-protection laws as the country where you initially provided it. If we transfer personal information to service providers in another country, we will do so in accordance with applicable law and protect it as described in this policy.

Security & retention

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification. Email addresses are stored in encrypted form. Other verification information, including IP addresses, cookie identifiers, fingerprint identifiers, and Discord OAuth refresh tokens, is stored in our database and protected through our security controls.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

How long we keep your personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. The appropriate period depends on the type of information and why we process it. If personal information is no longer required, we will delete it in line with applicable requirements.

The right to deletion is not absolute. Where permitted or required by applicable law, we may retain limited information that is reasonably necessary to comply with a legal obligation; establish, exercise, or defend legal claims; investigate serious fraud, abuse, security incidents, or misuse; or protect the rights and safety of AuthenticateMe, participating servers, or other users.

Any information retained after a deletion request will be limited to what is reasonably necessary for the stated purpose, kept only for as long as that purpose or applicable law requires, and made available only to the recipients described in this policy where necessary. It will not continue to be used as an active verification record or to support the verification status that was revoked when the verification data was deleted.

If we cannot fulfill a deletion request in full, we will explain where applicable what categories of information must remain, why they must remain, the legal basis or permitted reason, how long they are expected to remain or the criteria used to decide that period, who may receive them, and how to contact us about the decision.

Children's privacy

We do not direct our products or services at children under 13 or at anyone below the minimum age required to use Discord in their country. We do not knowingly collect personal information from a person who is below the applicable minimum age.

Deleting your data

How to make a deletion request

You may request deletion of personal data held by AuthenticateMe by joining our Support Server and opening a private support ticket. You do not need to waive any privacy right, accept a ban or penalty, or agree to an unrelated condition before we process a valid deletion request.

We may ask for limited additional information where reasonably necessary to confirm that the requester is the person associated with the data. We will never ask for your Discord password, authentication code, backup code, or unrelated account credentials as part of this process.

We will handle valid deletion requests without undue delay and within the period required by applicable law. See our Data Deletion page for the steps and practical effects.

Verification status and server access

Deleting your verification data revokes the AuthenticateMe verification status supported by that data. Once the underlying verification record has been deleted, AuthenticateMe can no longer confirm or support the previous verification.

As an operational consequence, you may be removed only from servers where you previously completed AuthenticateMe verification successfully. You will not be removed from servers where you did not successfully verify through AuthenticateMe. This is not a punishment, a permanent ban, a waiver, or a condition placed on your right to request deletion.

Individual server owners remain responsible for their own membership, access, and moderation decisions. AuthenticateMe does not decide whether a server independently allows you to join, remain, or rejoin.

A deletion request does not by itself ban or blacklist you from AuthenticateMe. You may use AuthenticateMe again and complete a new verification, subject to the individual server's rules, permissions, and moderation decisions. A new verification will result in new personal data being processed under the Privacy Policy in effect at that time.

Your rights

You may choose not to provide information, but that may prevent us from completing verification or providing an authenticated feature. We will not unlawfully discriminate against you for exercising a privacy right.

Depending on the law that applies to you, you may have rights to request access to, correction of, or deletion of personal information; restrict or object to certain processing; request data portability; or withdraw consent where processing relies on consent. These rights are not absolute and may be subject to lawful exceptions.

Your right to make a deletion request and the operational effect on your verification status are explained in Deleting your data. Exercising that right does not require you to give up any other privacy right.

If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

General

Limits of our policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to this policy

We may update this policy to reflect changes to the Services, our practices, or applicable requirements. We will post the updated policy here and revise the updated date at the top of the page.

Where required by law, we will provide additional notice, obtain consent, or offer an applicable choice before using personal information for a materially different purpose.

Contact us

For questions or concerns regarding your privacy, join our Support Server and open a private support ticket. Do not post personal or account information in a public channel.